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A REPORT ON WILES' CAMBRIDGE LECTURES 

0\ ■ K. RUBIN AND A. SILVERBERG 



Abstract. In lectures at the Newton Institute in June of 1993, Andrew Wiles 
announced a proof of a large part of the Taniyama-Shimura Conjecture and, 
as a consequence, Fermat's Last Theorem. This report for nonexperts dis- 
cusses the mathematics involved in Wiles' lectures, including the necessary 
background and the mathematical history. 
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Introduction 



On June 23, 1993, Andrew Wiles wrote on a blackboard, before an audience 
at the Newton Institute in Cambridge, England, that if p is a prime number, u, 
V, and w are rational numbers, and u^ + v^ + w^ = 0, then uvw — 0. In other 
words, he announced that he could prove Fermat's Last Theorem. His announce- 
(^ ' ment came at the end of his series of three talks entitled "Modular forms, elliptic 

^SJ . curves, and Galois representations" at the week-long workshop on "p-adic Galois 

04 ' representations, Iwasawa theory, and the Tamagawa numbers of motives" . 

C— ^ , In the margin of his copy of the works of Diophantus, next to a problem on 

Pythagorean triples, Pierre de Fermat (1601-1665) wrote: 

^^ I Cuhum autem in duos cubos, aut quadratoquadratum in duos quadrato- 

f^ ■ quadratos, et generaliter nullam in infinitum ultra quadratum potestatem in 

"t^ i duos ejusdem nominis fas est dividere : cujus rei demonstrationem mirabilem 

sane detexi. Hanc marginis exiguitas non caperet. 

(It is impossible to separate a cube into two cubes, or a fourth power into 

two fourth powers, or in general, any power higher than the second into two 

like powers. I have discovered a truly marvelous proof of this, which this 

margin is too narrow to contain.) 



We restate Fermat's conjecture as follows. 

Fermat's Last Theorem. Ifn > 2, then a"- + b^'- = c" has no solutions in nonzero 
integers a, b, and c. 

A proof by Fermat has never been found, and the problem has remained open, 
inspiring many generations of mathematicians. Much of modern number theory 
has been built on attempts to prove Fermat's Last Theorem. For details on the 
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history of Fermat's Last Theorem (last because it is the last of Fermat's questions 
to be answered) see g , [g , and [g6| . 

What Andrew Wiles announced in Cambridge was that he could prove "many" 
elliptic curves are modular, sufRciently many to imply Fermat's Last Theorem. In 
this paper we will explain Wiles' work on elliptic curves and its connection with 
Fermat's Last Theorem. In §|l| we introduce elliptic curves and modularity, and 
give the connection between Fermat's Last Theorem and the Taniyama-Shimura 
Conjecture on the modularity of elliptic curves. In §0 we describe how Wiles re- 
duces the proof of the Taniyama-Shimura Conjecture to what we call the Modular 
Lifting Conjecture (which can be viewed as a weak form of the Taniyama-Shimura 
Conjecture), by using a theorem of Langlands and Tunnell. In §0 and §0 we show 
how the Semistable Modular Lifting Conjecture is relat ed t o a conjecture of Mazur 
on deformations of Galois representations (Conjecture 4^), and in s|5] we describe 



Wiles' method of attack on this conjecture. In order to make this survey as acces- 
sible as possible to nonspecialists, the more technical details are postponed as long 
as possible, some of them to the appendices. 

Much of this report is based on Wiles' lectures in Cambridge. The authors apol- 
ogize for any errors we may have introduced. We also apologize to those whose 
mathematical contributions we, due to our incomplete understanding, do not prop- 
erly acknowledge. 

The ideas Wiles introduced in his Cambridge lectures will have an important 
influence on research in number theory. Because of the great interest in this subject 
and the lack of a publicly available manuscript, we hope this report will be useful 
to the mathematics community. In early December 1993, shortly before this paper 
went to press. Wiles announced that "the final calculation of a precise upper bound 
for the Selmer group in the semistable case" (see §5.3 and §5.4 below) "is not yet 
complete as it stands," but that he believes he will be able to finish it in the near 
future using the ideas explained in his Cambridge lectures. While Wiles' proof 
of Theorem |5.3 below and Fermat's Last Theorem d epe nds on the calculation he 



referred to in his December announcement, Theorem 5.4 and Corollary bX do not 



Wiles' work provides for the first time infinitely many modular elliptic curves over 



the rational numbers which are not isomorphic over the complex numbers (see §5.5 
for an explicit infinite family). 

Notation. The integers, rational numbers, complex numbers, and p-adic integers 
will be denoted Z, Q, C, and Zp, respectively. If F is a field, then F denotes an 
algebraic closure of F. 



1. Connection between Fermat's Last Theorem and elliptic curves 

1.1. Fermat's Last Theorem follows from modularity of elliptic curves. 

Suppose Fermat's Last Theorem were false. Then there would exist nonzero integers 
a, b, c, and n > 2 such that a" + fe" — c"-. It is easy to see that no generality is lost 
by assuming that n is a prime greater than three (or greater than four million, by 
|2J; see Q for n = 3 and 4) and that a and b are relatively prime. Write down the 
cubic curve: 

(1) j/2^x(a; + a")(x-6"). 
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In §1.3 we will see that such curves are elliptic curves, and in §1.4 we will explain 
what it means for an elliptic curve to be modular. Kenneth Ribet [p7| proved that if 
n is a prime greater than three, a, 5, and c are nonzero integers, and a" + 6" = c", 
then the elliptic curve (1) is not modular. But the results announced by Wiles 
imply the following. 

Theorem 1.1 (Wiles). If A and B are distinct, nonzero, relatively prime integers, 
and AB(A — B) is divisible by 16, then the elliptic curve 



y'^ = x{x + A){x + B) 



is modular. 



Taking A — d^ and B — —6" with a, 6, c, and n coming from our hypothetical 
solution to a Fermat equation as above, we see that the conditions of Theorem n^ 
are satisfied since n > 5 and one of a, 6, and c is even. Thus Theorem |l.l| and 
Ribet's result together imply Fermat's Last Theorem! 

1.2. History. The story of the connection between Fermat's Last Theorem and 
elliptic curves begins in 1955, when Yutaka Taniyama (1927-1958) posed problems 
which may be viewed as a weaker version of the following conjecture (see [p8[). 

Taniyama-Shimura Conjecture. Every elliptic curve over Q is modular. 

The conjecture in the present form was made by Goro Shimura around 1962-64 
and has become better understood due to work of Shimura [33-37] and of Andre 
Weil ^^ (see also [^). The Taniyama-Shimura Conjecture is one of the major 
conjectures in number theory. 

Beginning in the late 1960s [15-18], Yves Hellegouarch connected Fermat equa- 
tions a" -I- 6" = c" with elliptic curves of the form (1) and used results about Fer- 
mat's Last Theorem to prove results about elliptic curves. The landscape changed 
abruptly in 1985 when Gerhard Frey stated in a lecture at Oberwolfach that elliptic 
curves arising from counterexamples to Fermat's Last Theorem could not be mod- 
ular |11[]. Shortly thereafter Ribet ||2^ proved this, following ideas of Jean-Pierre 
Serre |32|] (see |[24| for a survey). In other words, "Taniyama-Shimura Conjecture 
=> Fermat's Last Theorem". 

Thus, the stage was set. A proof of the Taniyama-Shimura Conjecture (or enough 
of it to know that elliptic curves coming from Fermat equations are modular) would 
be a proof of Fermat's Last Theorem. 

1.3. Elliptic curves. 

Definition. An elliptic curve over Q is a nonsingular curve defined by an equation 
of the form 

(2) y + aixy + aj,y ~ x + a2X + a^x -\- ag 

where the coefficients at are integers. The solution (oo, oo) will be viewed as a point 
on the elliptic curve. 
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Remarks, (i) A singular point on a curve /(x, y) = is a point where both partial 
derivatives vanish. A curve is nonsingular if it has no singular points. 

(ii) Two elliptic curves over Q are isomorphic if one can be obtained from the 
other by changing coordinates x = A^x' + B, y = A'^y' + Cx' + D, with A, B, C, 
Z? e Q and dividing through by A^. 

(iii) Every elliptic curve over Q is isomorphic to one of the form 

y — X + a2X + a4X + ae 

with integers a^. A curve of this form is nonsingular if and only if the cubic on the 
right side has no repeated roots. 

Example. The equation y^ — x{x + 3'^){x — 4^) defines an elliptic curve over Q. 

1.4. Modularity. Let S] denote the complex upper half plane {z e C : Im(z) > 0} 
where Im(z) is the imaginary part of z. If A^ is a positive integer, define a group of 
matrices 

ToiN) = {(^ ^) e SL2(Z) : c is divisible by A^}. 

The group Fq ( A^) acts on Sj by linear fractional transformations ( " d ) (-^) = ff+S • 
The quotient space ^/Tq{N) is a (noncompact) Riemann surface. It can be com- 
pleted to a compact Riemann surface, denoted Xo{N), by adjoining a finite set of 
points called cusps. The cusps are the finitely many equivalence classes of QUJicxD} 
under the action of ro(A^) (see Chapter 1 of |g5[). The complex points of an elliptic 
curve can also be viewed as a compact Riemann surface. 

Definition. An elliptic curve E is modular if, for some integer A^, there is a holo- 
morphic map from A'o(A^) onto E. 

Example. It can be shown that there is a (holomorphic) isomorphism from Xo(15) 
onto the elliptic curve y^ = x{x + 3'^){x — 4'^). 

Remark. There are many equivalent definitions of modularity (see §11. 4. D of [e3 
and appendix of 123]). In some cases the equivalence is a deep result. For Wiles' 
proof of Fermat's Last Theorem it suffices to use only the definition given in §fj 
below. 

1.5. Semistability. 

Definition. An elliptic curve over Q is semistable at the prime q if it is isomorphic 
to an elliptic curve over Q which modulo q either is nonsingular or has a singu- 
lar point with two distinct tangent directions. An elliptic curve over Q is called 
sem,istable if it is semistable at every prime. 

Example. The elliptic curve y^ = x{x + 3^){x — 4^) is semistable because it is 
isomorphic to y'^ + xy + y = x^ + x'^ — lOx — 10, but the elliptic curve y^ = 
x{x + 4^) (a; — 3^) is not semistable (it is not semistable at 2). 

Beginning in fS we explain how Wiles shows that his main result on Galois 
representations (Theorem |5.3| ) implies the following part of the Taniyama-Shimura 
Conjecture. 
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Semistable Taniyama-Shimura Conjecture. Every semistable elliptic curve 

over Q is modular. 

Proposition 1.2. The Semistable Taniyama-Shimura Conjecture implies Theorem 



1.1 



Proof. If A and B are distinct, nonzero, relatively prime integers, write Ea,b for 
the elliptic curve defined by y^ = x{x + A){x + B). Since Ea,b and E-a,-b are 
isomorphic over the complex numbers (i.e., as Riemann surfaces), Ea,b is modular 
if and only if E-a,~b is modular. If further AB{A — B) is divisible by 16, then 
either Ea,b or E^a,-b is semistable (this is easy to check directly; see for example 
§1.1 of IpS). The Semistable Taniyama-Shimura Conjecture now implies that both 
Ea,b and E^a.-b are modular, and thus implies Theorem [1.1|. D 



Remark. In §1.1 we saw that Theorem 1.1 and Ribet's Theorem together imply 



Fermat's Last Theorem. Therefore, the Semistable Taniyama-Shimura Conjecture 
implies Fermat's Last Theorem. 

1.6. Modular forms. In this paper we will work with a definition of modularity 
which uses modular forms. 

Definition. If A'' is a positive integer, a modular form f of weight k for ro(A^) is 
a holomorphic function f : Sj ^ C which satisfies 

(3) /(7(z)) = (cz + d)'=/(z) forevery7=(^^)Gro(iV)andze:^, 
and is holomorphic at the cusps (see Chapter 2 of P^]). 

A modular form / satisfies f{z) — f{z + 1) (apply (3) to ( J }) G ro(A^)), so 
it has a Fourier expansion f{z) = X]^o '^"^^""^' '^i^h complex numbers a„ and 
with n > because / is holomorphic at the cusp ioo. We say / is a cusp form if it 
vanishes at all the cusps; in particular for a cusp form the coefficient oq (the value 
at ioo) is zero. Call a cusp form normalized if ai = 1. 

For fixed N there are commuting linear operators (called Hecke operators) T™, 
for integers m > 1, on the (finite-dimensional) vector space of cusp forms of weight 
two for ro(A^) (see Chapter 3 of |3|). If f{z) = X;r=i a„e2'^™^ then 

OC 

(4) T^f{z)^Y.i E da„,,/,2)e'-^"^ 

n=l (d,N) = l 

where (a, b) denotes the greatest common divisor of a and b and a \ b means that a 
divides b. The Hecke algebra T{N) is the ring generated over Z by these operators. 

Definition. In this paper an eigenform will mean a normalized cusp form of weight 
two for some ro(A^) which is an eigenfunction for all the Hecke operators. 

By (4), if /(z) — X]^i a„e^'^™^ is an eigenform, then T^f — Omf for all m. 



K. RUBIN AND A. SILVERBERG 



1.7. Modularity, revisited. Suppose E is an elliptic curve over Q. If p is a 
prime, write Fp for the finite field with p elements, and let E{Fp) denote the Fp- 
solutions of the equation for E (including the point at infinity). We now give a 
second definition of modularity for an elliptic curve. 

Definition. An elliptic curve E over Q is modular if there exists an eigenform 



Ecx 
n 

(5) 



a„e 



27Tinz 



such that for all but finitely many primes q, 

a,^q + l-i^{EiFg)). 
2. An overview 



The flow chart shows how Fermat's Last Theorem would follow if one knew the 
Semistable Modular Lifting Conjecture (Conjecture pj| ) for the primes 3 and 5. 
In fy we discussed the upper arrow, i.e., the implication "Semistable Taniyama- 
Shimura Conjecture => Fermat's Last Theorem". In this section we will discuss the 
other implications in the flo w ch art. The implication given by the lowest arrow is 
straightforward (P ropo sition |2.3| ) , while the middle one uses an ingenious idea of 
Wiles (Proposition ^.4| ). 



Fermat's Last Theorem 



Semistable Taniyama-Shimura 
Conjecture 



Semistable Taniyama-Shimura 
for PE.3 irreducible 




Semistable Modular 
Lifting for p — 5 



Langlands-TunncU 
Theorem 




Semistable Modular 
Lifting for p = 3 



Semistable Modular Lifting Conjecture => Format's Last Theorem 



Remark. By the Modular Lifting Conjecture we will mean the Semistable Modular 
Lifting Conjecture with the hypothesis of semistability removed. The arguments of 
this section can also be used to show that the Modular Lifting Conjecture for p = 3 
and 5, together with the Langlands-Tunnell Theorem, imply the full Taniyama- 
Shimura Conjecture. 



A REPORT ON WILES' CAMBRIDGE LECTURES 7 

2.1. Semistable Modular Lifting. Let Q denote the algebraic closure of Q in 
C, and let Gq be the Galois group Gal(Q/Q). If p is a prime, write 

£p '■ Gq -^ Fp 

for the character giving the action of Gq on the p-th roots of unity. For the facts 
about elliptic curves stated below, see |39|. If E is an elliptic curve over Q and F is 
a subfield of the complex numbers, there is a natural commutative group law on the 
set of i^-solutions of E, with the point at infinity as the identity element. Denote 
this group E{F). If p is a prime, write E[p\ for the subgroup of points in -E(Q) of 
order dividing p. Then E[p] = F^. The action of Gq on E[p\ gives a continuous 
representation 

Pe,p ■ Gq -^ GL2(Fp) 
(defined up to isomorphism) such that 

(6) det{pE,p) = Ep 
and for all but finitely many primes q, 

(7) trace(p£,p(Frob,)) = q + l- #(^(F,)) (mod p). 

(See Appendix |^ for the definition of the Frobenius elements Frobg G Gq attached 
to each prime number q.) 

If f{z) — J2'^=i flne^^™^ is an eigenform, let Of denote the ring of integers of 
the number field Q(a2, 03, . . . ). (Recall that our eigenforms are normalized so that 
ai = l.) 

The following conjecture is in the spirit of a conjecture of Mazur (see Conjectures 



3.2 and 4.2) 



Conjecture 2.1 (Semistable Modular Lifting Conjecture). Suppose p is an odd 
prime and E is a semistable elliptic curve over Q satisfying 

(a-) PE.p is irreducible, 

(b) there are an eigenform f{z) = X^^j^ a„e^'^*"^ and a prime ideal A of Of 
such that p e A and for all but finitely many primes q, 

aq = q + l-#{E{¥q)) (mod A). 

Then E is modular. 

The Semistable Modular Lifting Conjecture is a priori weaker than the Semi- 
stable Taniyama-Shimura Conjecture because of the extra hypotheses (a) and (b). 
The more serious condition is (b); there is no known way to produce such a form 
in general. But when p = 3, the existence of such a form follows from the theorem 
below of Tunnell |Q and Langlands |Q. Wiles then gets around condition (a) 
by a clever argument (described below) which, when pe,z is not irreducible, allows 
him to use p = 5 instead. 
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2.2. Langlands-Tunnell Theorem. In order to state the Langlands-Tunnell 
Theorem, we need weight-one modular forms for a subgroup of ro(A^). Let 

ri(Ar) = {(^^) e SL2(Z) :c = {mod N), a = d= I (mod A^)}. 



Replacing ro(A^) by ri(A^) in §1.6, one can define the notion of cusp forms on 
ri(A^). See Chapter 3 of |^ for the definitions of the Hecke operators on the 
space of weight-one cusp forms for ri(iV). 

Theorem 2.2 (Langlands-Tunnell). Suppose p : Gq -^ GL2(C) is a continuous 
irreducible representation whose image in PGL2(C) is a subgroup of S4 (the sym- 
metric group on four elements), r is complex conjugation, and det(p(T)) — —1. 
Then there is a weight-one cusp form X]^i b^e'^^™'^ for some Ti{N), which is an 
eigenfunction for all the corresponding Hecke operators, such that for all but finitely 
many primes q, 

(8) bq = trace(p(Frobg)). 

The theorem as stated by Langlands [EOJ and by Tunnell B^ produces an auto- 
morphic representation rather than a cusp form. Using the fact that Aei{p{T)) = 
— 1, standard techniques (see for example [p2[) show that this automorphic repre- 



sentation corresponds to a weight-one cusp form as in Theorem 2.2 



2.3. Semistable Modular Lifting => Semistable Taniyama-Shimura. 

Proposition 2.3. Suppose the Semistable Modular Lifting Conjecture is true for 
p ~ i, E is a semistable elliptic curve, and pE,3 is irreducible. Then E is modular. 

Proof. It suffices to show that hypothesis (b) of the Semistable Modular Lifting 
Conjecture is satisfied with the given curve E, for p = 3. There is a faithful 
representation 

^ : GL2(F3) ^ GL2(Z[V^]) C GL2(C) 
such that for every g G GL2(F3), 

(9) trace(V'(5)) = trace(5) (mod(l + ^/~^)) 
and 

(10) det(V'(5)) = det(.g) (mod 3). 
Explicitly, ip can be defined on generators of GL2(F3) by 

Let p = ijJopE^j. If r is complex conjugation, then it follows from (6) and (10) that 
det(p(r)) = -1. The image of V' in PGL2(C) is a subgroup of PGL2(F3) ^ 5*4. 
Using that pE,3 is irreducible, one can show that p is irreducible. 

Let p be a prime of Q containing 1 -I- V^. Let g{z) — ^2"^=! ^ne^^™^ be a 
weight-one cusp form for some ri(iV) obtained by applying the Langlands-Tunnell 
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Theorem (Theorem 2.2) to p. It foUows from (6) and (10) that N is divisible by 3. 
The function 





OO 




f if d = (mod 3), 


E(z) = 


= l + 6^^x(rf)e'""' 


where x{d) = ' 


1 if d = 1 (mod 3), 




n=l d\n 




[ -1 if d = 2 (mod 3) 



2'iTinz 



is a weight-one modular form for ri(3). The product 5(z)E(z) = X]^i "^"^ 
is a weight-two cusp form for Tq{N) with c„ = 6„ (mod p) for all n. It is now 
possible to find an eigenform /(z) = X^^i,'^"^^'^™^ O'^ ro(^) such that a„ = 6„ 
(mod p) for every n (see 6.10 and 6.11 of g). By (7), (8), and (9), / satisfies (b) 
of the Semistable Modular Lifting Conjecture with p = 3 and with A = p n Of. D 

Proposition 2.4 (Wiles). Suppose the Semistable Modular Lifting Conjecture is 
true for p — 3 and 5, E is a semistable elliptic curve over Q, and pE,3 is reducible. 
Then E is modular. 

Proof. The elliptic curves over Q for which both pE,3 and pE,5 are reducible are all 



known to be modular (see Appendix B.l). Thus we can suppose pE,5 is irreducible. 
It suffices to produce an eigenform as in (b) of the Semistable Modular Lifting 
Conjecture, but this time there is no analogue of the Langlands-Tunnell Theorem 
to help. Wiles uses the Hilbert Irreducibility Theorem, applied to a parameter space 
of elliptic curves, to produce another semistable elliptic curve E' over Q satisfying 

(i) PE'.d is isomorphic to pe,5, and 
(ii) pe',3 is irreducible. 



(In fact there will be infinitely many such E'; see Appendix p3.2| .) Now by Proposi- 
tion |2]^, E' is modular. Let f{z) = Yl^=i'^ne^^^"'^ be a corresponding eigenform. 
Then for all but finitely many primes q, 

og^q+l- #{E'{¥q)) = trace(pi=;.,5(Frob,)) 

= trace(p£,5(Frob,)) = q+\- #{E{Fg)) (mod 5) 

by (7) . Thus the form / satisfies hypothesis (b) of the Semistable Modular Lifting 
Conjecture, and we conclude that E is modular. D 



Taken together, Propositions p.3| and 2A show that the Semistable Modular 
Lifting Conjecture for p = 3 and 5 implies the Semistable Taniyama-Shimura Con- 
jecture. 

3. Galois representations 

The next step is to translate the Semistable Modular Lifting Conjecture into 
a conjecture (Conjecture p?^ ) about the modularity of liftings of Galois repre- 
sentations. Throughout this paper, if A is a topological ring, a representation 
P '■ Gq —f Gh2{A) will mean a continuous homomorphism and [p] will denote the 
isomorphism class of p. If p is a prime, let 

£p '■ Gq -^ Zp 
be the character giving the action of Gq on p-power roots of unity. 
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3.1. The p-adic representation attached to an elliptic curve. Suppose E 
is an elliptic curve over Q and p is a prime number. For every positive integer 
n, write i?[p"] for the subgroup in i?(Q) of points of order dividing p" and Tp{E) 
for the inverse limit of the -B[p"] with respect to multiplication by p. For every n, 
£;[p"] ~ (Z/p"Z)^, and so Tp{E) = Z^. The action of Gq induces a representation 

Pe,p ■ Gq -^ GL2(Zp) 

such that det(pE,p) — £p and for all but finitely many primes q, 

(11) trace(p£,p(Frob,)) = q+l- #(S(F,)). 



Composing pE.p with the reduction map from Zp to Fp gives pE.p of §2.1 



3.2. Modular representations. If / is an eigenform and A is a prime ideal of 
O/, let 0/,A denote the completion of Of at A. 

Definition. If A is a ring, a representation p : Gq -^ GL2{A) is called modular 
if there are an eigenform f{z) = X]^i ^^^e^'^™^, a ring A' containing A, and a 
homomorphism l : Of — > A' such that for all but finitely many primes q, 

trace(p(Frobg)) = t(ag). 

Examples, (i) Given an eigenform /(z) — J2'^=i a-ne^^"''^ and a prime ideal A of 
Of, Eichlcr and Shimura (see §7.6 of |^) constructed a representation 

Pf,\ ■ Gq -> GL2(0/,a) 

such that det(pf^\) = Sp (where A n Z = pTi) and for all but finitely many primes q, 

(12) trace(p/,A(Frobq)) = a,. 

Thus pf\ is modular with l taken to be the inclusion of Of in Of^x. 

(ii) Suppose p is a prime and E is an elliptic curve over Q. If E is modular, then 
Pe,p and pE,p are modular by (11), (7), and (5). Conversely, if pE,p is modular, 
then it follows from (11) that E is modular. This proves the following. 

Theorem 3.1. Suppose E is an elliptic curve over Q. Then 

E is modular 4^ pE,p is modular for every p <^ pE,p is modular for one p. 



Remark. In this language, the Semistable Modular Lifting Conjecture says that if 
p is an odd prime, E is a. semistable elliptic curve over Q, and pE,p is modular and 
irreducible, then pE.p is modular. 
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3.3. Liftings of Galois representations. Fix a prime p and a finite field k of 
cliaracteristic p. Recall that k denotes an algebraic closure of k. 

Given a map (j) : A ^ B, the induced map from GL2{A) to GL2{B) will also be 
denoted (j). 

If p : Gq —^ Gh2{A) is a representation and A' is a ring containing A, we write 
p^ A' for the composition of p with the inclusion of GL2{A) in GL2{A'). 

Definition. If p : Gq -^ GL2(A:) is a representation, we say that a representation 
p : Gq -^ GL2{A) is a lifting of p (to A) if A is a complete noetherian local 
Zp-algebra and there exists a homomorphism l : A ^ k such that the diagram 

GL2{A) 



I' 



[p (8 fe] 

commutes, in the sense that [top] — [/5(^ k]. 

Examples, (i) If E is an elliptic curve then pE,p is a lifting of pE,p- 

(ii) If E is an elliptic curve, p is a prime, and hypotheses (a) and (b) of Conjecture 
^■l| hold with an eigenform / and prime ideal A, then pfx is a lifting of pE.p- 

3.4. Deformation data. We will be interested not in all liftings of a given p, but 
rather in those satisfying various restrictions. See Appendix H for the definition of 
the inertia groups Iq C Gq associated to primes q. We say that a representation p 
of Gq is unramified at a prime q if p{Iq) — 1. If E is a set of primes, we say p is 
unramified outside of Ti \i p is unramified at every q ^ T,. 

Definition. By deformation data we mean a pair 

P = (E,t) 

where E is a finite set of primes and t is one of the words ordinary or flat. 

If A is a Zp-algebra, let £a ■ Gq ^ Z^ ^ A^ he the composition of the 
cyclotomic character Sp with the structure map. 

Definition. Given deformation data V, a representation p : Gq -^ GL2{A) is 
type-V if A is a complete noetherian local Zp-algebra, det(p) = ea, P is unramified 
outside of E, and p is i at p (where t € {ordinary, flat}; see Appendix |Q). 

Definition. A representation p : Gq ^ GL2(fc) is T) -modular if there are an 
eigenform / and a prime ideal A of Of such that pf^\ is a type-I? lifting of p. 

Remarks, (i) A representation with a type-2? lifting must itself be type-P. There- 
fore if a representation is P-modular, then it is both type-2? and modular. 



(ii) Conversely, if p is type-P, modular, and satisfies (ii) of Theorem 5.3 below, 
then p is 2?- modular, by work of Ribet and others (see |28] ) . This plays an important 
role in Wiles' work. 
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3.5. Mazur Conjecture. 

Definition. A representation p : Gq — > GL2(fc) is called absolutely irreducible if 
p®k is irreducible. 

The following variant of a conjecture of Mazur (see Conjecture 18 of [ESJ; see 



also Conjecture 4.2 below) implies the Semistable Modular Lifting Conjecture. 



Conjecture 3.2 (Mazur). Suppose p is an odd prime, k is a finite field of charac- 
teristic p, V is deformation data, and p : Gq —^ GL2(fc) is an absolutely irreducible 
'D-modular representation. Then every type-V lifting of p to the ring of integers of 
a finite extension of Qp is modular. 



Remark. Loosely speaking, Conjecture |3.2| says that if p is modular, then every 
lifting which "looks modular" is modular. 

Definition. An elliptic curve E over Q has good (respectively, bad) reduction at 
a prime g if i? is nonsingular (respectively, singular) modulo q. An elliptic curve 
E over Q has ordinary (respectively, supersingular) reduction ai q ii E has good 
reduction at q and E[q] has (respectively, does not have) a subgroup of order q 
stable under the inertia group Iq. 



Proposition 3.3. Conjecture 3.2 implies Conjecture 2.1 



Proof. Suppose p is an odd prime and E is a, semistable elliptic curve over Q which 



satisfies (a) and (b) of Conjecture |2.l|. We will apply Conjecture ^^with p = ps.p- 
Write r for complex conjugation. Then r^ = 1, and by (6), det {pe.,p{t)) = —1. 
Since pE,p is irreducible and p is odd, a simple linear algebra argument now shows 
that pe,p is absolutely irreducible. 



Since E satisfies (b) of Conjecture 2.1, pE,p is modular. Let 



• E = {p} U {primes q : E has bad reduction at q}, 

• i = ordinary if E has ordinary or bad reduction at p, 
t = flat if E has supersingular reduction at p, 

• V= (E,i). 

Using the semistability of E, one can show that Pe,p is a typc-I? lifting of Pe,p and 
(by combining results of several people; see |2q|) that pE^p is P-modular. Conjecture 
3.2 then says pE,p is modular. By Theorem 3.1, E is modular. D 



4. Mazur's deformation theory 



Next we reformulate Conjecture 3.2 as a conjecture (Conjecture |4.2D that the 
algebras which parametrize liftings and modular liftings of a given representation 
are isomorphic. It is this form of Mazur's conjecture that Wiles attacks directly. 
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4.1. The universal deformation algebra R. Fix an odd prime p, a finite field 
k of characteristic p, deformation data V, and an absolutely irreducible type-I? 
representation p : Gq -^ GL2{k). Suppose O is the ring of integers of a finite 
extension of Qp with residue field k. 

Definition. We say p : Gq -^ GL2{A) is a (T), 0)-lifting of p if p is type-P, A is a 
complete noetherian local O-algebra with residue field fc, and the following diagram 
commutes 

GL2(A) 



G, 



Q 



[p] 



GL2(fc) 



where the vertical map is reduction modulo the maximal ideal of A. 



Theorem 4.1 (Mazur-Ramakrishna) . With p, k, T>, p, and O as above, there are 
an O-algebra R and a {'D,0)-lifting pn : Gq -^ GL2(i?) of p, with the property 
that for every {T),0) -lifting p of p to A there is a unique O-algebra homomorphism 
4>p : R ^ A such that the diagram 

^ _ [pr] 




commutes. 

This theorem was proved by Mazur [ pi| in the case when T) is ordinary and 
by Ramakrishna [ p5[ when T) is flat. Theorem 4.1 determines R and pn up to 
isomorphism. 

4.2. The universal modular deformation algebra T. Fix an odd prime p, a 
finite field k of characteristic p, deformation data T), and an absolutely irreducible 
type-I? representation p : Gq -^ GL2(fc). Assume p is P-modular, and fix an 
eigenform / and a prime ideal A of Of such that pf^\ is a type-I? lifting of p. 
Suppose in addition that O is the ring of integers of a finite extension of Qp with 
residue field k, Of^x C O, and the diagram 

^GL2(0/,a) 

[p/,a] 




commutes, where the vertical map is the reduction map. 

Under these assumptions pf^\ (X) O is a {V, C')-lifting of p, and Wiles constructs a 
generalized Hecke algebra T which has the following properties (recall that Hecke 
algebras T{N) were defined in § |l.6| ). 

(Tl) T is a complete noetherian local O-algebra with residue field k. 
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(T2) There are an integer N divisible only by primes in E and a homomorphism 
from the Hecke algebra T{N) to T such that T is generated over O by the 
images of the Hecke operators Tq for primes g ^ S. By abuse of notation 
we write Tq also for its image in T. 

(T3) There is a (P, 0)-lifting 

Pt : Gq -^ GL2(T) 

of p with the property that trace(/OT(Frobq)) — Tq for every prime g ^ S. 
(T4) If p is modular and is a (I?, C')-lifting of p to A, then there is a unique 
O-algebra homomorphism tpp : T -^ A such that the diagram 

Gq '"' I GL2(T) 



\- 



GL2{A) 
commutes. 



Since px is a {V, C')-lifting of p, by Theorem 4.1 there is a homomorphism 

such that pt is isomorphic to 930 p^^. By (T3), (/3(trace(pfl;(Frobg))) = Tq for every 
prime g ^ E, so it follows from (T2) that ip is surjective. 



4.3. Mazur Conjecture, revisited. Conjecture 3.2 can be reformulated in the 
following way. 

Conjecture 4.2 (Mazur). Suppose p, k, T>, p, and O are as in § fl.2| . Then the 
above map ip : R ^ T is an isomorphism. 



Conjecture 4.2 was stated in [E3| (Conjecture 18) for T> ordinary, and Wiles 



modified the conjecture to include the flat case. 



Proposition 4.3. Conjecture 4.2 implies Conjecture 3.2 



Proof. Suppose p : Gq -^ GL2(fc) is absolutely irreducible and I?- modular, A is 
the ring of integers of a finite extension of Qp, and p is a type-2? lifting of p to A. 
Taking O to be the ring of integers of a sufficiently large finite extension of Qp, and 
extending p and p to O and its residue field, respectively, we may assume that p is 



a {T>, C')-lifting of p. Assuming Conjecture 4.2, let Tp — (f)p o ip ^ : T ^ A, with 
as in Theorem |t[ By (T3) and Theorem |Tf -tpiTq) = trace(/9(Frob,)) for all but 



finitely many q. By §3.5 of fSq], given such a homomorphism i/; (and viewing A as 
a subring of C), there is an eigenform J2^=i anC^'^™^ where Oq = ip{Tq) for all but 
finitely many primes q. Thus p is modular. D 
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5. Wiles' approach to the Mazur Conjecture 



In this section we sk etch the major ideas of Wiles' attack on Conjecture 4.2, 
The first step (Theorem 5^), and the key to Wiles' proof, is to reduce Con ject ure 



5.2 we 



4.2 to a bound on the order of the cotangent space at a prime of R. In 
see that the corresponding tangent space is a Selmer group, and in §5.3 we outline 
a general procedure due to Kolyvagin for bounding sizes of Selmer groups. The 
input for Kolyvagin's method is known as an Euler system. The most difficult 
part of Wiles' work (§5.4), and the part described as "not yet complete" in his 
December announcement, is his construction of a suitable Euler system. I n §|5.5| we 
state the results announced by Wiles (Theorems 5.3 and 5.4 and Corollary 5.5) and 
explain why Theorem 5.3 suffices for proving the Semistable Taniyama-Shimura 
Conjecture. As an application of Corollary 5.5 we write down an infinite family of 
modular elliptic curves. 

For §5 fix p, k, V, p, O, f{z) = ^^'^^^^ a„e2""^ and A as in §|^, 

By property (T4) there is a homomorphism 

such that TT o px is isomorphic to pf^\(^ O. By property (T2) and (12), tt satisfies 
7r(Tq) = aq for all but finitely many q. 

5.1. Key reduction. Wiles uses the following generalization of a theorem of 
Mazur, which says that T is Gorenstein. 

Theorem 5.1. There is a (noncanonical) T-module isomorphism 

Homci(T,C')^T. 

Let 77 denote the ideal of O generated by the image under the composition 

Homo(T,C')^T^O 

of the element ir G Homc)(T,0). The ideal rj is well defined independent of the 
choice of isomorphism in Theorem p.l| . 

The map tt determines distinguished prime ideals of T and R, 

pT = ker(7r), p^: = ker(7ro ip) = if~^{pT). 



Theorem 5.2 (Wiles). // 

#ipR/pl) < *{Ohl) < 00, 
then if : R ^ T is an isomorphism. 

The proof is entirely commutative algebra. The surjectivity of tp shows that 
#(pfl/p?j) > #(Pt/p|'), and Wiles proves that #(Pt/P^) > #{0/v)- Thus if 
#(pfl/p?,3 < #(0/^), then 



(13) 



#ipR/pl) = #(Pt/P^) - #(0/ry). 



The first equality in (13) shows that tp induces an isomorphism of tangent spaces. 
Wiles uses the second equality in (13) and Theorem 5.1 to deduce that T is a local 
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complete intersection over O (that is, there are /i, . . . , fr G C[[a;i, ■ • ■ , Xr]] such 
that 

T = 0[[xi,...,X,]]/(/i,... Jr) 

as O-algebras) . Wiles then combines these two results to prove that ip is an iso- 
morphism. 

5.2. Selmer groups. In general, if M is a torsion Gq-module, a Selmer group 
attached to M is a subgroup of the Galois cohomology group H^{Gq,M) deter- 
mined by certain "local conditions" in the following way. If g is a prime with 
decomposition group Dq C Gq, then there is a restriction map 

res, : H\Gq,M) -^ H\Dq,M). 

For a fixed collection of subgroups >/ = { Jg C H^{Dq, M) : q prime} depending on 
the particular problem under consideration, the corresponding Selmer group is 

5(A/) =f|res-i(J,) C H\Gq,M). 

Write H'{Q,M) for iJ*(GQ,M), and W{Qq,M) for H'{Dq,M). 

Example. The original examples of Selmer groups come from elliptic curves. Fix 
an elliptic curve E and a positive integer to, and take M = E[ra], the subgroup of 
points in -E(Q) of order dividing to,. There is a natural inclusion 

(14) E{Cl)/mE{q,) -> iJi(Q, E[m]) 

obtained by sending x € £'(Q) to the cocycle a i-^ a{y) — y, where y G £'(Q) is any 
point satisfying my — x. Similarly, for every prime q there is a natural inclusion 

E{Qq)/mE{Qq) -> H\Qq,E[m]). 

Define the Selmer group S{E[m]) in this case by taking the group Jq to be the image 
of _E(Qg)/TO_E(Qg) in H^{Clq, E[m]), for every q. This Selmer group is an important 
tool in studying the arithmetic of E because it contains (via (14)) £'(Q)/m_E(Q). 

Retaining the notation from the beginning of §^ let m denote the maximal ideal 
of O and fix a positive integer n. The tangent space Homo (pij/p|,, O/m") can be 
identified with a Selmer group as follows. 

Let Vn be the matrix algebra M2(C'/m"), with Gq acting via the adjoint repre- 
sentation a{B) = pf^x{<7)Bpf^\{a)~^ . There is a natural injection 

s : Homo(pfl/p2j,0/m") ^ H\Q,V„) 

which is described in Appendix |d| (see also §1.6 of ||2J). Wiles defines a collection 
•7 = {Jq ^ H^{Qq, Vn)} depending on V. Let Sv{Vn) denote the associated Selmer 
group. Wiles proves that s induces an isomorphism 

Homo(pi,/p2j,0/m") ^ 5p(K). 
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5.3. Euler systems. We have now reduced the proof of Mazur's conjecture to 
bounding the size of the Selmer groups Sv{Vn). About five years ago Kolyvagin 
|l9[ , building on ideas of his own and of Thaine pQ], introduced a revolutionary 
new method for bounding the size of a Selmer group. This new machinery, which 
is crucial for Wiles' proof, is what we now describe. 

Suppose M is a Gq-module of odd exponent m and J' — {Jq C H^ {Qq,M)} is 
a system of subgroups with associated Selmer group S{M) as in |5.2| . Let AI — 
Hom(M, /x„), where //,„ is the group of m-th roots of unity. For every prime q, 
the cup product gives a nondegenerate Tate pairing 

( , ), : H\Qq,M) X H'iQqJl) ^ H^iQ.^fiJ ^ Z/mZ 

(see Chapters VI and VII of g). If c e H^Q, M) and d e -ffi(Q, M), then 

(15) ^(resg(c),res,(d)), = 0. 

Suppose that £ is a finite set of primes. Let S*^ C iJi(Q,M) be the Selmer 
group given by the local conditions J* = {J* C iJ^(Qq,M)}, where 

^ J the orthogonal complement of Jq under { , )q ii q <^ C, 
"^« " |Hi(Qq,M) ifge/:. 



IideH\Q,M), define 



by 



9d-YlJq^ Z/mZ 



^d{{cq)) = ^(c„resq(d)),. 
qec 

Write res£ : H^{Q,M) -^ Ilgez: ^^(Q?' -^^) ^"-"^ ^^^ product of the restriction 
maps. By (15) and the definition of J*, if d e S^, then res£ (5'(M)) C ker(6'd). If 
in addition res£ is injective on S'(M), then 

#(^(M))<#( fl kerie,)). 

The difficulty is to produce enough cohomology classes in S'^ to show that the 
right side of the above inequality is small. Following Kolyvagin, an Euler system is 
a compatible collection of classes k{C) G S}^ for a large (infinite) collection of sets of 
primes £. Loosely speaking, compatible means that ii £ ^ C, then res^(K(£ U {i})) 
is related to res£(K(£)). Once an Euler system is given, Kolyvagin has an inductive 
procedure for choosing a set C such that 



• resc is injective on S{M), 

• Clvcc ker(6'K(-p)) can be computed in terms of k{ 
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(Note that if P C £, then S^ C S}., so K{r) G S}..) 

For several important Selmer groups it is possible to construct Euler systems for 
which Kolyvagin's procedure produces a set C actually giving an equality 



#(5(Af)) = #( fl kcr(0.(p))). 



vcc 

This is what Wiles needs to do for the Selmer group S-piVn). There are several 
examples in the literature where this kind of argument is worked out in some detail. 
For the simplest case, where the Selmer group in question is the ideal class group 
of a real abelian number field and the k{C) are constructed from cyclotomic units, 
see [^ . For other cases involving ideal class groups and Selmer groups of elliptic 
curves, see @, Q, |§, [||. 

5.4. Wiles' geometric Euler system. The task now is to construct an Euler 
system of cohomology classes with which to bound #(S'p(Ki)) using Kolyvagin's 
method. This is the most technically difficult part of Wiles' proof and is the part 
of Wiles' work he referred to as not yet complete in his December announcement. 
We give only general remarks about Wiles' construction. 

The first step in the construction is due to Flach [^. He constructed classes 
k{C) € 5^ for sets C consisting of just one prime. This allows one to bound the 
exponent of SviVn), but not its order. 

Every Euler system starts with some explicit, concrete objects. Earlier examples 
of Euler systems come from cyclotomic or elliptic units. Gauss sums, or Heegner 
points on elliptic curves. Wiles (following Flach) constructs his cohomology classes 
from modular units, i.e., meromorphic functions on modular curves which are holo- 
morphic and nonzero away from the cusps. More precisely, k(£) comes from an 
explicit function on the modular curve Xi{L, N), the curve obtained by taking the 
quotient space of the upper half plane by the action of the group 

ri(i,7V) = {(^^) e SL2(Z) :c=0 (mod LTV), a = d=l (mod L)}, 



and adjoining the cusps, where L = Yieec ^ ^^^'^ where N is the N of (T2) of §4.2, 
The construction and study of the classes k{C) rely heavily on results of Faltings 
|8), Q and others. 



5.5. Wiles' results. Wiles announced two main results (Theorems 5.3 and 5.4 



below) in the direction of Mazur's conjecture, under two different sets of hypotheses 



on the representation p. Theorem 5.3 implies the Semistable Taniyama-Shimura 



Conjecture and Fermat's Last Theorem. Wiles' proof of Theorem 5.3 depends on 



the not-yet-complete construction of an appropriate Euler system (as in §p.4|), while 



his proof of Theorem 5.4 (though not yet fully checked) does not. For Theorem 5.4, 
Wiles bounds the Selmer group of § |3.2| without constructing a new Euler system, 
by using results from the Iwasawa theory of imaginary quadratic fields. (These 
results in turn rely on Kolyvagin's method and the Euler system of elliptic units; 
see [|l).) 

Since for ease of exposition we defined modularity of representations in terms 
of ro(A^) instead of ri(A^), the theorems stated below are weaker than those an- 
nounced by Wiles, but have the same applications to elliptic curves. (Note that by 
our definition of type-2?, if p is type- 2?, then det(p) — Sp.) 
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If p is a representation of Gq on a vector space V, Sym^(p) denotes the repre- 
sentation on the symmetric square of V induced by p. 



Theorem 5.3 (Wiles). Suppose p, k, D, p, and O are as in g4.2| and p satisfies 
the following additional conditions : 

(i) Sym^(p) is absolutely irreducible, 

(ii) if p is ramified at q and q ^ p, then the restriction of p to Dq is reducible, 
(iii) if p is 3 or 5, then for some prime q, p divides ^{p{Iq)). 

Then ip : R ^ T is an isomorphism. 



Since Theorem |5.3| does not yield the full Mazur Conjecture (Conjecture [4. 2]) for 
p = 3 and 5, we need to reexamine the ar gum ents of §y to see which elliptic curves 
E can be proved modular usi ng T heorem |5.3| applied to pE.s and pe,5- 



Hypothesis (i) of Theorem 5.3 will be satisfied if the image of pE.p is sufficiently 
large in GL2(Fp) (for example, if PE,p is surjective). For p — 3 and p = 5, if PE,p 
satisfies hypothesis (iii) and is irreducible, then it satisfies hypothesis (i). 

If E is semistable, p is an odd prime, and PE.p is irreducible and modular, then 
Pe,p is P-modular for some I? (see the proof of Proposition 3.3) and pE.p satisfies (ii) 



and (iii) (us e Tate cur ves; see §14 of Appendix C of ||39|). Therefore by Propositions 



4.3 and 3.3, Theorem |5.3| implies that the Semistable Modular Lifting Conjecture 



(Conjecture 2A) holds for p = 3 and for p = 5. As shown in §g, the Semistable 



Taniyama-Shimura Conjecture and Fermat's Last Theorem follow. 



Theorem 5.4 (Wiles). Suppose p, k, V, p, and O are as in §4.2 and O contains 
no nontrivial p-th roots of unity. Suppose also that there are an imaginary quadratic 
field F of discriminant prime to p and a character x '■ Gal(Q/_F) — > O^ such that 
the induced representation Indx of Gq is a (V^O) -lifting of p. Then ip : R —> T is 
an isomorphism. 

Corollary 5.5 (Wiles). Suppose E is an elliptic curve over Q with complex mul- 
tiplication by an imaginary quadratic field F and p is an odd prime at which E has 
good reduction. If E' is an elliptic curve over Q satisfying 

• E' has good reduction at p and 

• PE',p is isomorphic to pE,p, 
then E' is modular. 

Proof of corollary. Let p be a prime of F containing p, and define 

9 O — the ring of integers of the completion of F at p, 

• fc = O/pO, 

• E = {primes at which E or E' has bad reduction} U {p}, 

• t = ordinary if E has ordinary reduction at p, 
t — flat if E has supersingular reduction at p, 

• V^ (I],t). 

Let 

X ■■ Gal(Q/F) ^ Anto{E[p°°]) = O' 

be the character giving the action of Gal(Q/i^) on _E[p°°] (where £^[p°°] is the group 
of points of E killed by the endomorphisms of E which lie in some power of p). It 
is not hard to see that pE,p ® O \s isomorphic to Indx. 
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Since E has complex multiplication, it is well known that E and pE.p are mod- 
ular. Since E has good reduction at p, it can be shown that the discriminant of 
F is prime to p and O contains no nontrivial p-th roots of unity. One can show 
that all of the hypotheses of Theorem p]4 are satisfied with p — pE,p <X) k. By our 
assumptions on E', pE'.p (Xi O is a (I?,C')-lifting of p, and we conclude (using the 



same reasoning as in the proofs of Propositions 3.3 and 4.2) that pE',p is modular 
and hence E' is modular. Q 



Remarks, (i) The elliptic curves E' of Corollary 5.5 are not semistable. 

(ii) Suppose E and p are as in Corollary ^^ and p = 3 or 5. As in Appendix B^ 
one can show that the elliptic curves E' over Q with good reduction at p and with 
Pe',p isomorphic to pE,p give infinitely many C-isomorphism classes. 

Example. Take E to be the elliptic curve defined by 

Then E has complex multiplication by Q(-\/— 2), and E has good reduction at 3. 
Define polynomials 

a4{t) = -2430t^ - 1512<3 - 396^^ - 56t - 3, 

ae{t) = 40824t^ + 31104^^ + 8370f'' + 504t3 - 148^^ - 24i - 1, 

and for each i G Q let Et be the elliptic curve 

y'^ ~ x^ — x^ + a4{t)x + a(i{t) 

(note that Eq = E). It can be shown that for every t G Q, PEt,3 is isomorphic to 
Pe,3- lit £ Z and i = or 1 (mod 3) (or more generally if t = 3a/ b or i = 3a/ b + 1 
with a and b integers and b not divisible by 3), then Et has good reduction at 3, 
for instance because the discriminant of Et is 

2^(27^2 + lot + lf{27t^ + 18t + 1)^ 

Thus for these values of t, Corollary |5.5| shows that Et is modular and so is any 
elliptic curve over Q isomorphic over C to Et, i.e., any elliptic curve over Q with 
j-invariant equal to 

/4(27t2 + 6i + l)(135t2 + 54t + 5) 
V (27t2 + lOf + l)(27f2 + I8t + 1) 

This explicitly gives infinitely many modular elliptic curves over Q which are 
nonisomorphic over C. 

(For definitions of complex multiplication, discriminant, and j-invariant, see any 
standard reference on elliptic curves, such as l39].) 
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Appendix A. Galois groups and Frobenius elements 

Write Gq = Gal(Q/Q). If g is a prime number and Q is a prime ideal dividing 
q in the ring of integers of Q, there is a fihration 

Gci^Dq^ Iq 

where the decomposition group Dq and the inertia group Iq are defined by 

DQ^iaeGQ-.aQ^Q}, 

Iq = W ^ T^Q '■ crx = X (mod Q) for all algebraic integers a;}. 

There are natural identifications 

Dq = Gal(Q,/Q,), Dq/Iq - Gal(F,/F,), 

and Frobg G Dq/Iq denotes the inverse image of the canonical generator x i— > x"^ of 
Gal(Fg/Fg). If Q' is another prime ideal above g, then Q' = aQ for some a G Gq 
and 

Dqi = crDQa^^, Iqi = alQa~^, Frobg' = crFrobgcr"^. 

Since we will care about these objects only up to conjugation, we will write Dq and 
Iq. We will write Frobq G Gq for any representative of a Frobg. If p is a represen- 
tation of Gq which is unramified at q, then trace(p(Frobq)) and det(p(Frobq)) are 
well defined independent of any choices. 



Appendix B. Some details on the proof of Proposition 2.4 



B.l. The modular curve Ao(15) can be viewed as a curve defined over Q in such 
a way that the noncusp rational points correspond to isomorphism classes (over C) 
of pairs {E' ,C) where E' is an elliptic curve over Q and C C -E(Q) is a subgroup 
of order 15 stable under Gq. An equation for Ao(15) is y^ = x{x + 3^){x — 4^), 
the elliptic curve discussed in fy. There are eight rational points on Xo(15), four of 
which are cusps. There are four modular elliptic curves, corresponding to a modular 
form for ro(50) (see p. 86 of Q), which lie in the four distinct C-isomorphism 
classes that correspond to the noncusp rational points on Ao(15). 

Therefore every elliptic curve over Q with a Gq-stable subgroup of order 15 is 
modular. Equivalently, if E is an elliptic curve over Q and both pE.s and pE,5 are 
reducible, then E is modular. 

B.2. Fix a semistable elliptic curve E over Q. We will show that there are 
infinitely many semistable elliptic curves E' over Q such that 

(i) Pe',5 is isomorphic to pe,5, and 
(ii) pe',3 is irreducible. 

Let 

r(5) = {(?S)eSL2(Z):(^^)^(J?) (mod 5)}. 

Let X be the twist of the classical modular curve A (5) (see |3^) by the cocycle 
induced by pe,5, and let S be the set of cusps of X. Then A is a curve defined over 
Q which has the following properties. 

• The rational points on X — S correspond to isomorphism classes of pairs 
{E',(j)) where E' is an elliptic curve over Q and (p • E[5] -^ E'[5] is a Gq- 
module isomorphism. 
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• As a complex manifold X — S is four copies oi Sj/r{5), so each component of 
X has genus zero. 

Let X'^ be the component of X containing the rational point corresponding to 
{E, identity). Then X'^ is a curve of genus zero defined over Q with a rational point, 
so it has infinitely many rational points. We want to show that infinitely many of 
these points correspond to semistable elliptic curves E' with pe',3 irreducible. 

There is another modular curve X defined over Q, with a finite set S of cusps, 
which has the following properties. 

• The rational points on X — S correspond to isomorphism classes of triples 
{E',(j),C) where E' is an elliptic curve over Q, : E[5] -^ E'[5] is a Gq- 
module isomorphism, and C C E'[3\ is a Gq-stable subgroup of order 3. 

• As a complex manifold X ~ S is four copies of S)/{T{5) D ro(3)). 

• The map that forgets the subgroup C induces a surjective morphism 9 : X —^ 
X defined over Q and of degree [r(5) : r(5) n ro(3)] = 4. 

Let X'^ be the component of X which maps to X^. The function field of X'^ 
is Q(t), and the function field of X° is Q{t)[x]/f{t,x) where f{t,x) £ Q{t)[x] is 
irreducible and has degree 4 in x. lit' G Q is sufficiently close 5-adically to the value 
of t which corresponds to E, then the corresponding elliptic curve is semistable at 
5. By the Hilbert Irreducibility Theorem we can find a ti G Q so that f{ti,x) is 
irreducible in Q[a;]. It is possible to fix a prime i y^ 5 such that f{ti,x) has no 
roots modulo £. If i' G Q is sufficiently close i!-adically to ti, then f(t',x) has no 
rational roots, and thus t' corresponds to a rational point of X'^ which is not the 
image of a rational point of X^. Therefore there are infinitely many elliptic curves 
E' over Q which are semistable at 5 and satisfy 

(i) E'[5] = E[5] as Gq-modules, and 
(ii) E' [3] has no subgroup of order 3 stable under Gq . 

It follows from (i) and the semistability of E that E' is semistable at all primes 
g ^ 5, and thus E' is semistable. We therefore have infinitely many semistable 
elliptic curves E' which satisfy the desired conditions. 

Appendix C. Representation types 

Suppose ^ is a complete noetherian local Zp-algebra and p : Gq ^ GL2(A) is a 
representation. Write p \dp for the restriction of p to the decomposition group Dp. 
We say p is 

• ordinary at p if p Jd is (after a change of basis, if necessary) of the form 
( X ) where x is unramified and the * are functions from Dp to A; 

• flat at p if p is not ordinary, and for every ideal a of finite index in A, the 
reduction of p Id modulo a is the representation associated to the Qp-points 
of a finite flat group scheme over Zp. 

Appendix D. Selmer groups 



With notation as in ^ (see especially §5^), define 



0„ = 0[e]/(e^m") 
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where e is an indeterminate. Then w t— )■ 1 + ew defines an isomorphism 

(16) K ^{5e GL2(0„) -.6=1 (mod e)}. 

For every a G Homc)(pii;/p|j, O/m") there is a unique O-algebra homomorphism 
"00 ; -R — > On whose restriction to pn is ea. Composing with the representation pji 



of Theorem 4.1 gives a (I?, C')-hfting Pa — ipa ° Pr of p to 0„. (In particular po 
denotes the (P, 0)-hfting obtained when a — 0.) Define a one-cocycle Cq, on Gq 
by 

ca(.g) ^ Pa{g)pQ{g)~^- 

Since pa = po (mod e), using (16) we can view c^ G -ff^(Q, V„). This defines a 
homomorphism 

s : Homo (Pfl/p2j, O/m") ^ i^'(Q,K), 

and it is not difficult to see that s is injective. The fact that po and Pa are type-I' 
gives information about the restrictions reSg(cQ,) for various primes q, and using this 
information Wiles defines a Selmer group ST>{Vn) C H^{Q,Vn) and verifies that s 
is an isomorphism onto S-piVn)- 
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